CLAIM AMENDMENTS 



This listing of claims will replace all prior versions and listings of claims in the 
application. 

Listing of Claims: 

1 . (Previously Presented): A method of logging a user of a computer system out of 
affiliated servers, the method comprising: 

providing a first cookie to a browser on the computer system being used by the 
user, the first cookie maintaining a list of affiliated servers having sites visited by the 
user following an authentication of the user; 

receiving one or more second cookies at the browser as the user visits sites on 
the affiliated servers following the authentication, the second cookies containing data 
associated with the corresponding affiliated servers; 

selecting a single logout link via the browser, wherein the logout link is contained 
on any of the sites that the user has visited on the affiliated servers; 

as a result of the selecting, issuing by the browser a request for obtaining data 
from the affiliated servers based on the list maintained with the first cookie; 

in response to the request for data issued by the browser, sending, by the 
affiliated servers, to the browser, cookie setting information and an image which is 
indicative of successful logout; 

in response to receiving the cookie setting information by the browser, clearing 
the second cookies from the browser by changing settings of the second cookies in 
accordance with the cookie setting information, wherein the user is logged out of the 
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affiliated servers having sites visited by the user following the authentication by 
selection of the single logout link. 

2. - 5. (Canceled) 

6. (Previously Presented): The method of claim 1 wherein the second cookies are 
expired by the browser in response to the cookie setting information to log the user out 
of the affiliated servers having the sites that the user visited. 

7. (Currently Amended): A computer readable storage medium having a program 
stored thereon for causing a computer to implement a method of logging a user of a 
computer system user-out of affiliated servers, the method comprising: 

providing a first cookie to a browser on the computer system being used by the 
user, the first cookie for maintaining a list of affiliated servers having sites visited by the 
user following an authentication of the user; 

receiving one or more second cookies at the browser as the user visits sites on 
the affiliated servers following the authentication, the second cookies containing data 
associated with the corresponding affiliated servers; 

selecting a single logout link via the browser, wherein the logout link is contained 
on any of the sites that the user has visited on the affiliated servers; 

as a result of the selecting, issuing by the browser a request for obtaining data 
from the affiliated servers based on the list maintained with the first cookie; 
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in response to the request for data issued by the browser, sending, by the 
affiliated servers, cookie setting information and an image to the browser which is 
indicative of a successful logout; 

in response to receiving the cookie setting information by the browser, clearing 
the second cookies from the browser by changing settings of the second cookies based 
on the cookie setting information. 

8. (Previously Presented): The computer readable storage medium of claim 7 wherein 
the request for data from the affiliated servers is issued by the browser during rendering 
of a logout page on the browser. 

9. (Previously Presented): The computer readable storage medium of claim 7 wherein 
the user is logged out of the affiliated servers having sites visited by the user by 
selection of the single logout link. 

1 0. (Previously Presented): A method of logging a user of a computer system out of 
affiliated servers comprising: 

receiving one or more cookies at a browser on the computer system as the user 
visits sites on the affiliated servers following an authentication of the user, wherein the 
one or more cookies contain data provided to the browser from corresponding one or 
more affiliated servers; 

requesting a logout page via the browser, wherein a logout link to the logout 
page is contained on at least one site that the user has visited on an affiliated server 
following the authentication of the user; 
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providing a link to an expire cookies page hosted on each affiliated server having 
a site visited by the user following the authentication; 

calling by the browser, during rendering of the logout page by the browser, the 
link to the expire cookies page on each affiliated server; 

sending cookie setting information from each affiliated server to the browser in 
response to receiving the call from the browser, the cookie setting information changing 
settings of the cookies to cause the browser to expire the cookies . 

1 1 . (Currently Amended): A system for logging a user of a computer system y-sef-out of 
affiliated servers comprising: 
one or more processors; 

one or more computer readable storage media coupled to the one or more 
processors, wherein the one or more processors are configured to execute modules 
including: 

a first module providing a browser on the computer system that receives one or 
more cookies as the user visits sites on the affiliated servers following an authentication 
of the user, wherein the one or more cookies contain data provided to the browser from 
corresponding one or more affiliated servers, wherein the browser issues a request for a 
logout page, wherein a logout link to the logout page is contained on at least one site on 
the affiliated servers that the user has visited following an authentication of the user by 
an authentication server; and 

a second module that provides a link to an expire cookies page on each affiliated 
server that, when called by the browser, causes each affiliated server to clear cookies 
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on the browser by sending cookie setting information to the browser, the cookie setting 
information changing settings of the cookies to cause the browser to expire the cookies, 

wherein the cookies include data provided to the browser from an associated one 
of the affiliated servers, and 

wherein the data contains at least one of: 

a date and time that the user is authenticated by an authentication server, 

and 

a profile for the user. 

12. (Previously Presented): The system of claim 1 1 further comprising a visited sites 
cookie for maintaining a list of affiliated servers that the user has visited following the 
authentication. 

13. (Previously Presented): The system of claim 12 wherein the list of affiliated servers 
is used to identify the link to each expire cookies page on each affiliated server. 

14. (Currently Amended): The system of claim 1 1 wherein the request for a logout page 
causes the logout page to be rendered by the browser, the logout page directing the 
browser to link to the expire cookies page on each affiliated server. 

15. (Previously Presented): A computer readable storage medium having a program 
stored thereon for causing a computer to implement a method of logging a user of a 
computer system out of affiliated servers, comprising: 
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receiving a request for a logout page via a browser on the computer system, 
wherein a logout link to the logout page is contained on at least one site on the affiliated 
servers that the user has visited following an authentication of the user, wherein 
following the authentication, cookies are provided to the browser as the user visits sites 
on the affiliated servers, wherein the cookies contain data provided to the browser from 
corresponding affiliated servers; 

providing a link to an expire cookies page on each affiliated server having a site 
visited by the user that when called by the browser as a result of requesting the logout 
page, causes each affiliated server to clear cookies on the browser by sending cookie 
setting information to the browser, the cookie setting information changing settings of 
the cookies to cause the browser to expire the cookies. 

16.-17. (Canceled) 

18. (Previously Presented): A method of logging out of affiliated domain servers on a 
network, the method performed by a browser implemented on a computer, the method 
comprising: 

receiving one or more cookies at the browser as a user visits sites on the 
affiliated servers following an authentication of the user by an authentication server, 
wherein the one or more cookies contain data provided to the browser from the 
authentication server; 

requesting a logout page from the authentication server by selecting a logout link, 
wherein the logout link is on at least one site on the affiliated domain servers that a user 
of the browser has visited following the authentication; 
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receiving image tags from the authentication server with the logout page, each 
image tag causing the browser to fetch an image from a URL identified by the image tag 
during rendering of the logout page; 

in response to the image tags, issuing get image requests to the URLs identified 
by the image tags; 

receiving cookie setting information and images at the browser from the affiliated 
domain servers hosting the URLs identified by the image tags in response to the get 
image requests, the cookie setting information clearing cookies identified by responses 
to the get image requests, wherein the clearing is carried out by changing settings of the 
cookies in accordance with the cookie setting information; and 

rendering the images received with the cookie setting information in the 
responses from the affiliated domain servers for inclusion in the logout page displayed 
by the browser. 

19. (Previously Presented): The method of claim 18 wherein the images comprise an 
image of a checkmark for indicating successful logout from a corresponding one of the 
affiliated servers. 

20. (Previously Presented): The method of claim 18 wherein the image tags ensure that 
the image will not be retrieved from cache. 

21 . (Original): The method of claim 1 8 wherein the image tag includes a query. 
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22. (Previously Presented): The method of claim 18 wherein the affiliated domain 
servers logged into are identified in a visited sites data structure. 

23. (Previously Presented): The method of claim 22 wherein the data structure 
comprises a visited sites cookie provided to the browser by the authentication server. 

24. (Previously Presented): A method of logging a user of a computer system out of 
affiliated servers comprising: 

receiving one or more cookies at a browser on the computer system as the user 
visits sites on the affiliated servers following an authentication of the user, the cookies 
containing data provided to the browser from an authentication server; 

requesting a logout page, wherein a logout link for the logout page is on at least 
one site on the affiliated servers that the user has visited following an authentication of 
the user; 

providing a link to an expire cookies page hosted on each affiliated server, said 
link being in the form of an image tag included in the logout page; 

calling each link by the browser in response to encountering the image tags in 
the logout page; 

in response to the calling of each link, sending cookie setting information with an 
image sent to the browser by each affiliated server having a site that the user has 
visited following the authentication to clear cookies on the browser, the cookie setting 
information changing settings of the cookies to cause the browser to expire the cookies. 
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25. (Previously Presented): The method of claim 24 wherein a data structure of visited 
sites is maintained identifying the affiliated servers that are visited by the user following 
the authentication. 

26. (Previously Presented): The method of claim 25 wherein the data structure is a 
visited sites cookie provided to the browser by the authentication server. 

27. (Previously Presented): The method of claim 24 wherein the logout link is provided 
on one or more of multiple servers logged into through the affiliated servers, one of the 
affiliated servers, and the authentication server. 

28. (Original): The method of claim 24 wherein the cookies comprise user personal 
information. 

29. - 30. (Canceled) 

31 . (Previously Presented): A method of generating a logout page for display on a 
browser used to log a user of a computer system out of affiliated servers, the method 
comprising: 

obtaining a visited sites data file which identifies each affiliated server logged into 
having a site visited following an authentication of the user; 

generating a plurality of image tags based on the visited sites data file, each 
image tag corresponding to one of the affiliated servers; 
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providing a URL in each image tag that causes an affiliated server associated 
with the image tag to clear cookies from the browser by sending cookie setting 
information for changing settings of the cookies to cause the cookies to be deleted by 
the browser, the cookie setting information being sent to the browser with an image sent 
to the browser by the corresponding affiliated server in response to receipt of an image 
fetch request sent by the browser when the browser encounters the image tag, 

wherein the cookies deleted include data provided to the browser from an 
associated one of the affiliated servers, and 

generating the logout page by the browser by including the images received by 
the browser from the affiliated servers in the logout page . 

32. (Previously Presented): The method of claim 31 wherein each image tag contains a 
query string parameter causing the browser to fetch an image from the affiliated server 
corresponding to the image tag as a separate image fetching transaction. 

33. (Previously Presented): The method of claim 1 , wherein the request for data from 
the affiliated servers is issued by the browser during rendering of a logout page on the 
browser, wherein the logout page is received by the browser as a result of selecting the 
logout link. 

34. (Previously Presented): The computer-readable medium of claim 7, wherein the 
data contains at least one of: 

a date and time that the user is authenticated by an authentication server, and 
a profile for the user. 

Serial No.: 09/594,332 
Atty Docket No.: MS1-0826US 
Atty/Agent: Colin D. Barnitz 



-11- 



35. (Previously Presented): The method of claim 10, wherein the data contains at least 
one of: 

a date and time that the user is authenticated by an authentication server, 
a profile for the user, and 

a list of sites visited by the user following the authentication, wherein the sites 
include web servers. 

36. (Previously Presented): The computer-readable medium of claim 15, wherein the 
data contains at least one of: 

a date and time that the user is authenticated by an authentication server, 
a profile for the user, and 

a list of sites visited by the user following the authentication, wherein the sites 
include web servers. 

37. - 38. (Canceled) 

39. (Previously Presented): The method of claim 18, wherein the data contains at least 
one of: 

a date and time that the user is authenticated by an authentication server, 
a profile for the user, and 

a list of sites visited by the user following the authentication, wherein the sites 
include web servers. 
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40. (Previously Presented): The method of claim 24, wherein the data contains at least 
one of: 

a date and time that the user is authenticated by an authentication server, 
a profile for the user, and 

a list of sites visited by the user following the authentication, wherein the sites 
include web servers. 

41 . (Previously Presented): The method according to claim 1 , further including steps of: 

hosting by each affiliated server a URL used for retiring cookies during logging 
out of the user; 

directing the request for data issued by the browser to the URL for retiring 
cookies for each affiliated server having a site that the user has visited following the 
authentication; and 

sending, by the affiliated servers receiving the request, the image and a set 
cookie header including the cookie setting information for changing the settings of the 
second cookies for clearing the second cookies. 

42. (Previously Presented): A method of logging a computer system user out of 
affiliated servers comprising steps of: 

authenticating a user to visit sites on the affiliated servers by an authentication 
server associated with the affiliated servers; 

providing a first cookie to a browser being used by the user, the first cookie for 
maintaining a list of affiliated servers having sites visited by the user following the 
authentication of the user, wherein as the user visits sites on the affiliated servers 
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following the authentication, second cookies containing data associated with the 
corresponding affiliated servers are stored by the browser; 

selecting, by the user via the browser, a single logout link, wherein the logout link 
is contained on any site that the user has visited on the affiliated servers or the 
authentication server following the authentication; 

receiving the selection of the logout link at the authentication server; 

generating a plurality of image tags based on the first cookie maintaining the list 
of sites visited following the authentication, each image tag corresponding to one of the 
affiliated servers; 

providing the image tags in a logout page to be rendered by the browser; 

rendering the logout page on the browser of the user; 

in response to encountering the image tags in the logout page by the browser, 
generating a plurality of image requests by the browser during rendering of the logout 
page based on the list of affiliated servers maintained by the first cookie, each image 
request corresponding to one of the affiliated servers listed in the list of affiliated 
servers; 

sending the image requests by the browser to URLs hosted by the corresponding 
affiliated servers, wherein each URL is for an expire cookies page on each affiliated 
server that, when called by the browser, causes each affiliated server to clear cookies 
on the browser by sending cookie setting information and an image to the browser; 

in response to sending the image requests, receiving at the browser from each 
affiliated server receiving the image request, an image identified by the image request 
and cookie setting information; 
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changing settings of the second cookies in response to the cookie setting 
information to cause the second cookies to be expired by the browser, wherein 
expiration of the second cookies causes the user to be logged out of the affiliated 
servers having sites visited by the user following the authentication; 

completing rendering of the logout page by the browser by incorporating the 
images received from the affiliated servers in the rendered logout page. 
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